CVE-2005-1087

Description

CRLF injection vulnerability in the cmdIS.DLL plugin for AN HTTPD Server 1.42n allows remote attackers to spoof or hide entries in the logfile, and possibly read files using an injected type command, via CRLF sequences in an HTTP request.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/20031

http://www.security.org.sg/vuln/anhttpd142n.html

http://www.osvdb.org/15362

http://securitytracker.com/id?1013666

http://secunia.com/advisories/14861

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS